*.almosafer.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 1f:ff:57:08:21:30:52:9c:7c:18:1a:41:06:65:04:25 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.almosafer.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1f:ff:57:08:21:30:52:9c:7c:18:1a:41:06:65:04:25
Serial Number (int): 42531868781991014798866365796483138597
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 72:0c:42:d2:f2:2d:8e:65:2f:35:e8:05:6a:a2:d4:33:9c:3a:f0:85
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 2a:42:07:ee:de:03:bf:e3:b5:59:ff:87:59:1c:5b:ec:35:dc:9d:01
Fingerprint (sha256): 0f:ad:28:66:9d:a5:d3:04:a3:40:eb:01:3b:a5:20:7d:52:bf:6e:f5:2b:6a:8e:74:c0:f3:90:02:a6:50:bb:f4

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.almosafer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.almosafer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.almosafer.com
almosafer.com

Other certificates including the domain name almosafer.com

(limited to 100 certificates)
www.jobs.almosafer.com
tsunilrao.com
cosasdeadministracion.co
link.email.almosafer.com
web-cms-strapi-prod-apps.almosafer.com
next-preprod-kw.almosafer.com
19035924.email.almosafer.com
www.raltech.in
alexzhovnir.com
almosafer.com
19035924.mktg.almosafer.com
links.email.almosafer.com
ar-manual.business.almosafer.com
protonlabs.io
*.almosafer.com
www.richardwillems.com
www.hackkosice.com
tajawal.com
agentline.app
sni.cloudflaressl.com
tajawal.com
sa.almosafer.com
mindscopetech.app
sandbox.byhook.com
noiremarche.com
6519114.automated.almosafer.com
*.almosafer.com
incapsula.com
link.mktg.almosafer.com
book.almosafer.com
codeaf.dev
morse.stevemaguire.dev
qa.almosafer.com
sni.cloudflaressl.com
sa.almosafer.com
dev.atomtech.cc
feedback.almosafer.com
links.email.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
*.almosafer.com
footballprenup.com
www.giggee.com
tajawal.com
www.artkom.dev
app.rogueland.eventup.ro
cms-api-dev.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
refilingindiaadmin.estore.business
www.kanagrid.com
tajawal.com
cms-api.almosafer.com
next-preprod-sa.almosafer.com
sni.cloudflaressl.com
next-preprod-bh.almosafer.com
ablink.mktg.almosafer.com
app.floraum.co.kr
web-cms-strapi-dev.almosafer.com
incapsula.com
19035924.mktg.almosafer.com
business-dev.almosafer.com
almosafer.com
tajawal.com
ablink.mktg.almosafer.com
tajawal.com
flightstatus.stgairasia.com
business.almosafer.com
ae.almosafer.com
6519114.mktg.almosafer.com
app.almosafer.com
app.almosafer.com
sni.cloudflaressl.com
ridhhisidhhimartadmin.estore.business
bh.almosafer.com
www.jobs.almosafer.com
sni.cloudflaressl.com
next-preprod.almosafer.com
bo.clubup.it
oktoberfest.thepub.com.co
*.almosafer.com
secur.dev.assek.ca
sni.cloudflaressl.com
tajawal.com
kw.almosafer.com
next-dev-qa.almosafer.com
next-staging-qa.almosafer.com
svmjasrana.up-sl.in
business-dev.almosafer.com
sni.cloudflaressl.com
incapsula.com
tajawal.com
*.almosafer.com
business.almosafer.com
next-staging-ae.almosafer.com
host.almosafer.com
almosafer.com
alexzhovnir.com
19035924.loyalty.almosafer.com
*.next-dev.tajawal.com

Certificate

The complete raw certificate details for *.almosafer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFsDCCA5igAwIBAgIQH/9XCCEwUpx8GBpBBmUEJTANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTI0MDQzMDEzMTM1NVoXDTI1MDUzMTEzMTM1NVowGjEYMBYG
A1UEAwwPKi5hbG1vc2FmZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs0JFtnbnhQBJl9R1WW/y40lJVaCHzUH0ea9xP2OJsgVVgJ6yDZwTbvFQ
GNYDEzMVTImA/Fy9ruBS0ELAdpaQwVZrszmFpLmzNuHQM8w/Ufe6HH5Z+oRIqP0F
D4UIgBQDzV6fEPZ9eijcuK6amo3SrAxcYSHxELYgsbh8AqFazehkM4jDQ9xnn7z2
baheeTEiUmG6lWucUUfLbay5gm1v03g9Awd0tk2N450XDwD8tDq1DWKHPTwgiOuK
TWhUawxbAsHQ69SGs7nYlIAbAcJvQUZll5BWeKOV1AhA+2qWdBjWE55+rbyAZzKK
skf4qd/ePWsj3bosiRDCV8v+h6pwXwIDAQABo4IBoTCCAZ0wDAYDVR0TAQH/BAIw
ADAfBgNVHSMEGDAWgBQmFH7g3Nem9+LUBCffYfHC7OcyyjByBggrBgEFBQcBAQRm
MGQwQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0LnNzbC5jb20vU1NMY29tLVN1YkNB
LVNTTC1SU0EtNDA5Ni1SMS5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6Ly9vY3Nwcy5z
c2wuY29tMCkGA1UdEQQiMCCCDyouYWxtb3NhZmVyLmNvbYINYWxtb3NhZmVyLmNv
bTAjBgNVHSAEHDAaMAgGBmeBDAECATAOBgwrBgEEAYKpMAEDAQEwHQYDVR0lBBYw
FAYIKwYBBQUHAwIGCCsGAQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9j
cmxzLnNzbC5jb20vU1NMY29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwHQYD
VR0OBBYEFHIMQtLyLY5lLzXoBWqi1DOcOvCFMA4GA1UdDwEB/wQEAwIFoDATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAekTMubVRfAgTb0yl
h0rmc5f8hcF09JJ8IwEPqKNYimH8Kdxosq7tlTEzWyO3g6iuAzVr2s1w6D3I4KHV
jyez7W6bOGKMp7Vy24oz7uIE70f1kJKdc8L2fzaObrvjGpZeQzIbohp5vCcB+4Fc
PAUXc1tfhkWy+MS/AyH99/6SVt89GEVntCPNjs/KH/LolqOxXldrUPmosfaVSXac
TCRmDupTZ74Y0NK3vNnaoFp9zgVIFZBbhaicU+eok7jvBGxFZAKOKm1EvqdewwYQ
WD9hJQazlS03cD3F2lnZ5MDRKkDR/2A1X9J8+oZgXM+k/aJhTRX449RAjS9DWYvk
p4YAcvx7dB3PUYmvUcqqeL8LXcSRAuoXzGQnsVl8eeULCPKJpWdVji3etCFneVCs
u0Q7ydnuXwETuvbEioO/+stTQtxl5ZPdFlIoWejZLFNTOUkKH5bnOoWWZYj8Qjsc
OQ2AAE05AyorteT6JmyXvb3o55lR/ry7c9d+15qjSzS2yQOOBk7ZP1hO4HtMyANg
/Ozl5VKpor0GuAtrN+H8X1J15WOibmMprOprQIIfBiIcg5QmsnP9XxG7/r5X8VjR
CZLw0/WmTUVtvxtQBpkyuCI20Lh1zSIdHRt7ntz2mrhPM5PW4pGLpfzJZYgY1z7B
tvz2nSKGKJJVZ6Gy1kIjeaJTeMg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0JFtnbnhQBJl9R1WW/y
40lJVaCHzUH0ea9xP2OJsgVVgJ6yDZwTbvFQGNYDEzMVTImA/Fy9ruBS0ELAdpaQ
wVZrszmFpLmzNuHQM8w/Ufe6HH5Z+oRIqP0FD4UIgBQDzV6fEPZ9eijcuK6amo3S
rAxcYSHxELYgsbh8AqFazehkM4jDQ9xnn7z2baheeTEiUmG6lWucUUfLbay5gm1v
03g9Awd0tk2N450XDwD8tDq1DWKHPTwgiOuKTWhUawxbAsHQ69SGs7nYlIAbAcJv
QUZll5BWeKOV1AhA+2qWdBjWE55+rbyAZzKKskf4qd/ePWsj3bosiRDCV8v+h6pw
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42531868781991014798866365796483138597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 13:13:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 13:13:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.almosafer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22629336685670295955206279103879732623386032507967423336756867728820234322266545750478136459092605322863985602123961984100492266286352736323111958736945833557193066991768432749138577911908864766720759824124085137161519774107552583718133518978332681857671579727411393065771280779490982291110917101394442502576390111628869754940258947512145939599681194962233703532133439974609532410730281768600660087084328658487888534057028672870176210976622116811050711683221626065814777294988386588220155824840092186054779442452836480744527393700348381924673699341338129261724676338502390717223380057782458003325378325040635119824991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almosafer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almosafer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							720c42d2f22d8e652f35e8056aa2d4339c3af085
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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